Free Juniper JN0-331 Exam Dumps Questions & Answers

What is the default session timeout for UDP sessions?

• A.  5 minutes
• B.  30 minutes
• C.  30 seconds
• D.  1 minute

Which statement is true about interface-based source NAT?

• A.  It requires you to configure address entries in the junos-global zone.
• B.  The IP addresses being translated must be in the same subnet as the egress interface.
• C.  It requires you to configure address entries in the junos-nat zone.
• D.  PAT is a requirement.

Interface ge-0/0/2.0 of your device is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17/24. A webserver with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. The webserver is attached to the ge-0/0/0.0 interface of your device. You must use NAT to make the webserver reachable from the Internet using port translation.
Which type of NAT must you configure?

• A.  pool-based destination NAT
• B.  static destination NAT
• C.  pool-based source NAT
• D.  source NAT with address shifting

Two VPN peers are negotiating IKE phase 1 using main mode.
Which message pair in the negotiation contains the phase 1 proposal for the peers?

• A.  message 1 and 2
• B.  message 7 and 8
• C.  message 3 and 4
• D.  message 5 and 6

Which two statements about the Diffie-Hellman (DH) key exchange process are correct? (Choose two.)

• A.  In the DH key exchange process, the session key is passed across the network to the peer for confirmation.
• B.  In the DH key exchange process, the public and private keys are not mathematically related, ensuring higher security.
• C.  In the DH key exchange process, the public and private keys are mathematically related using the DH algorithm.
• D.  In the DH key exchange process, the session key is never passed across the network.